Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          L6Mdt9Xfu9U3GHOWMRwP153qF0ZqTfAaH71TKkkb/js=
Subject key identifier:   D0:C1:07:F2:29:DB:C4:3F:84:22:2E:C8:7C:6A:99:26:07:3E:7B:B1
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019609B049FE2C0A08F2F95F5C5E9119B43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          14F4
Signing time:             Sun 06 Apr 2025 06:01:10 +0000
Manifest this update:     Sun 06 Apr 2025 06:01:10 +0000
Manifest next update:     Mon 07 Apr 2025 06:01:10 +0000
Files and hashes:         1: 1-bDKpqd9IKO5rqqIeQW8oQ51t34.roa (hash: 9sRAYb2cLVUUELUPyHX1OFnXLEKmKwd0nv4wx8tY0+U=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: SLv9cfl86egKdgrav8F+lmqW92Nt3Tba73SeTvoOLXU=)
                          3: BqT_zHeeWQLEscmXDYSo2bW_5hY.roa (hash: DjY7R/bkgsCT9jACm60nVer0BD9WjC1RQXTotru/rr8=)
                          4: Dsz5uvaCfsaiJBGzDzecMewv-Ug.roa (hash: MeEoWIXoG3LOHfXQOIQXyy5qgG/yZoQCFPvU7WaAQZk=)
                          5: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
                          6: IZHMmqPmt3UlljgeogJmO322ssc.roa (hash: PycVs9gX0pMXEW+1UcglBSJJRtamvhRH7S93lKKOQPE=)
                          7: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
                          8: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:b0:49:fe:2c:0a:08:f2:f9:5f:5c:5e:91:19:b4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Apr  6 06:01:10 2025 GMT
            Not After : Apr  7 06:01:10 2025 GMT
        Subject: CN=d0c107f229dbc43f84222ec87c6a9926073e7bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:33:29:67:73:8d:15:96:82:ab:34:db:43:
                    6f:25:17:f6:42:74:e3:7b:35:e3:30:67:1c:ad:30:
                    e7:d5:b6:07:04:f2:11:f3:14:d4:26:3f:19:7e:be:
                    4b:77:62:d3:c3:19:5b:93:6c:21:9c:f2:ad:0d:17:
                    40:32:3f:36:2e:cc:b2:9a:3b:43:83:45:18:6e:6d:
                    ac:8a:51:8d:9b:f2:dc:fc:90:6d:4e:83:d1:3f:42:
                    27:f7:a6:0c:e2:aa:81:b3:ac:1f:90:64:cf:8f:89:
                    86:e5:42:f1:ef:d9:fe:ea:2f:63:b8:c6:17:2f:d4:
                    d1:0f:81:96:81:fa:62:bc:6a:55:37:8f:bb:bc:48:
                    bc:00:12:f9:5c:6e:41:b6:60:d3:64:74:f8:9d:56:
                    5b:5c:2c:16:65:66:11:7c:27:b1:ea:a4:5f:37:4c:
                    83:66:15:cb:b3:c8:9f:d1:7e:84:a2:87:5f:d8:7a:
                    bc:3a:1e:4f:cb:fb:c0:05:b3:0b:ab:08:6f:3a:f4:
                    ac:cb:2b:15:80:ce:d1:96:bc:c8:dc:b8:64:15:2d:
                    23:44:6a:9c:10:6f:fa:8c:d4:6c:00:a6:d1:28:15:
                    79:74:79:ee:a2:ba:3c:a3:2d:01:2e:00:de:2e:a6:
                    0b:4e:52:ca:d9:d7:39:1d:74:a0:30:2f:c0:01:3d:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:07:F2:29:DB:C4:3F:84:22:2E:C8:7C:6A:99:26:07:3E:7B:B1
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:02:b2:3c:50:ba:46:11:f7:74:3f:2a:aa:34:a0:d3:fc:1a:
         ca:34:2f:41:49:8d:bd:99:8d:a4:a1:93:a9:8d:43:64:6d:1f:
         37:88:27:2f:bd:1e:27:ce:d4:4c:65:2a:94:fb:dc:b2:1a:55:
         34:63:37:bf:5e:15:ef:d5:9a:b5:cf:af:22:0c:cd:db:20:62:
         d8:2a:2d:61:a5:40:30:7c:2c:94:74:6a:29:74:bf:9a:00:1b:
         84:8b:a5:9a:97:af:f4:01:75:ca:f6:5c:00:cb:64:78:0e:22:
         35:41:e4:11:a6:00:94:3c:ad:51:27:c5:33:48:60:6b:b6:d9:
         fc:70:aa:04:3b:95:2b:db:35:37:7d:e8:85:27:b7:33:9d:8a:
         aa:7e:d7:c7:37:09:35:58:6a:3d:2c:85:de:e6:d0:81:2d:66:
         26:76:9b:0b:a1:0e:1f:de:13:ad:49:cd:93:2a:ac:79:7a:56:
         85:d5:d0:25:e7:a9:56:f5:14:26:36:b9:d4:26:2b:b7:89:dc:
         60:d8:e4:80:c4:e7:67:fb:19:a3:27:db:2c:54:a7:c3:96:94:
         2d:33:25:d8:c6:b2:15:31:d0:35:4c:94:a9:d0:ab:65:0c:fc:
         ba:3c:a1:fe:80:d6:3b:d8:b2:5e:29:3f:9f:06:f6:e7:74:f7:
         8c:bf:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:22 2025 by rpki-client